Skip to content
OpenAdvisories
Medium RHSA-2026:0744 1 CVE

Red Hat Security Advisory: libpq security update

Published Jan 19, 2026 · Updated Jul 9, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libpq 0:13.23-1.el8_4
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libpq-debuginfo 0:13.23-1.el8_4
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libpq-debugsource 0:13.23-1.el8_4
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libpq-devel 0:13.23-1.el8_4
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libpq-devel-debuginfo 0:13.23-1.el8_4
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libpq 0:13.23-1.el8_4
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libpq-debuginfo 0:13.23-1.el8_4
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libpq-debugsource 0:13.23-1.el8_4
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libpq-devel 0:13.23-1.el8_4
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libpq-devel-debuginfo 0:13.23-1.el8_4

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-12818

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …

    rust postgresql-9.3 postgresql15 postgresql-9.5 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2414826
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0744.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-12818
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-12818
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-12818
  • article
    https://www.postgresql.org/support/security/CVE-2025-12818/